A key exchange is performed 
across the GPRS / UMTS network 
between the MN 1 and the PGN 7 to 
establish a shared secret key. 



PGN 7 performs an MD-5 hash 
to provide a 128-bit 
authentication value for use in 
the Mobile IP protocol. 




MN 1 establishes a connection on Wireless LAN 
3 and requests a Mobile IP Care-Of-Address 
(COA) from a Dynamic Host Configuration 
Protocol (DHCP) server on the Internet. 
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The MN 3 receives the COA 
across the Wireless LAN 3. 
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MN 1 performs an MD-5 hash of the key 
obtained to obtain a 128-bit authentication 
value for use in the Mobile IP protocol. 
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MN 1 sends a Mobile IP registration request 
to the Home Agent (HA) hosted in the PGN 7 
using the authentication value established. If 
the MN 1 has activated the SA (an IPsec 
ESP tunnel) with the PGN 7, the registration 
messages can be sent in an encrypted form. 



To Figure 8B 



From Figure 

| 8A 

The PGN 7 receives the Mobile IP registration 
request and authenticates the message using 
the 128-bit established in step 82 and sends a 
Mobile IP registration reply to the MN 1 . 



If the ESP established is not active, the MN 
activates the ESP. The MN 2 then sends packets to 
the target host 8 using the ESP to the PGN 7. The 
PGN 7 forwards the packets to the target host 8 
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The target host 8 replies with 
packets to the PGN 7b. 
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At the conclusion of the data 
session, the MN 2 terminates the 
Q B connection with the PGN 7and 
detaches from the WLAN. 



.J 



When the MN 1 roams back into the GPRS / 
UMTS network, the MN 1 sends a Mobile IP 
registration request to the Home Agent 
hosted in the PGN 7 indicating that it is back 
on the home network. 
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The MN 1 uses the 128-bit authentication value 
obtained within this message. The PGN 7 
sends a Mobile IP registration reply to the MN 1 
using the 128-bit authentication value obtained 
within this message. 
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